Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5oLz3pz4-MZ3GMbubn-ZKr-jcjw.roa
File: 5oLz3pz4-MZ3GMbubn-ZKr-jcjw.roa (raw, json)
Hash identifier: BPfjqdKZud2rLGibA5Pwuh4Wyb4OPfv0c0lZJhVUit8=
Subject key identifier: E6:82:F3:DE:9C:F8:F8:C6:77:18:C6:EE:6E:7F:99:2A:BF:A3:72:3C
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 01856F4B5A58F8E9D3833854017EACBA4240
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5oLz3pz4-MZ3GMbubn-ZKr-jcjw.roa
Signing time: Sun 01 Jan 2023 21:44:47 +0000
ROA not before: Sun 01 Jan 2023 21:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210030
IP address blocks: 109.122.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5a:58:f8:e9:d3:83:38:54:01:7e:ac:ba:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 21:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e682f3de9cf8f8c67718c6ee6e7f992abfa3723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:f7:87:89:36:36:dd:71:ed:aa:e1:3b:d7:
fe:35:75:13:03:09:41:4a:87:d8:5e:ba:3d:31:e1:
56:5e:96:1f:02:81:97:6d:e9:e2:5a:bd:c0:24:d8:
9c:a1:49:3f:17:2f:2c:d7:f7:2c:42:68:81:51:a3:
1a:b1:63:e8:e6:55:be:e0:78:09:39:51:2a:73:10:
ab:c3:5a:18:e5:42:02:4f:83:7b:84:bd:53:88:96:
81:80:2c:f3:f3:fa:7d:5e:db:5a:54:c4:98:fd:cb:
d6:d0:9c:bf:b5:1e:eb:68:4a:57:ab:6d:66:21:0b:
27:07:1e:70:5d:a3:4c:6e:d3:4f:ae:31:80:0c:2e:
e5:79:5f:66:55:e2:07:5e:95:57:1c:b3:d4:e4:da:
bc:83:1b:77:c0:65:05:3f:6c:81:e9:92:1d:f2:83:
e0:c1:ae:f9:b3:e9:e8:28:45:72:58:f8:c9:a7:05:
70:de:15:c8:3d:d0:4f:d4:6a:c7:58:9a:bc:bf:b4:
cd:05:a8:6e:da:cc:b6:93:af:ef:e2:02:72:d3:52:
f0:e4:59:55:c4:ef:97:7d:0b:40:55:41:21:d2:37:
cf:97:09:a9:de:7d:47:6c:a6:0f:3c:85:49:df:52:
8c:f7:35:39:bf:cd:fb:07:c9:3b:d7:7c:15:93:d8:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:F3:DE:9C:F8:F8:C6:77:18:C6:EE:6E:7F:99:2A:BF:A3:72:3C
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/5oLz3pz4-MZ3GMbubn-ZKr-jcjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.198.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f8:ae:cc:3e:69:86:48:7a:0a:b6:3e:20:61:28:8d:a3:43:
75:1b:02:c2:c9:d4:8f:4b:e7:3f:03:d5:8d:bd:d7:e8:3e:63:
cb:70:a7:ce:17:2b:83:14:a8:78:ff:b9:e8:23:86:13:f9:03:
1b:ed:7a:66:1d:9f:78:cd:99:58:51:3e:24:cc:ad:08:df:8c:
5b:29:19:55:e7:d5:ca:09:f6:cc:7f:45:06:d5:b0:48:d3:f8:
a2:33:2e:04:08:0f:ad:fe:5f:98:31:51:0a:3a:8b:f9:82:bb:
47:6b:c5:48:6c:b6:56:1b:62:0d:65:31:a5:77:37:b4:89:48:
a6:d5:93:b9:88:de:8c:df:bb:7c:67:8a:fb:4b:5c:5b:a2:bb:
5d:69:49:6b:e6:02:66:dc:b7:5e:db:c8:f6:f6:1f:be:fe:21:
21:d2:e8:e2:18:25:3d:da:ac:a3:87:6c:3f:24:d1:40:e8:f5:
89:64:3f:b1:ab:18:7b:18:8c:e3:89:52:46:ac:ac:62:08:ec:
77:bd:e1:0a:ff:b2:33:42:33:9f:53:16:f0:78:27:81:af:a7:
31:11:d6:0b:bc:26:91:f8:8a:3d:e0:42:a3:4b:8a:89:b7:9c:
dc:f1:94:b3:fe:f2:02:fe:63:d8:49:0b:c9:09:db:cb:ea:9e:
33:66:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:28:42 2025 by rpki-client